Security audit
Security checks for vulnerabilities and agentic risk
This is a local video frame and clip extraction skill that matches its stated purpose and shows no hidden network, credential, persistence, or destructive behavior.
Install only if you are comfortable using a Chinese-language local ffmpeg helper. Process videos you have permission to use, choose output paths carefully because ffmpeg is invoked with overwrite behavior, and treat extracted frames, clips, GIFs, and metadata as potentially sensitive.
All user-facing descriptive text and trigger phrases are written in Chinese, with no indication that other languages are supported or that the user can choose their preferred language. This can violate a language/locale policy when a skill imposes a single language without explicit opt-in or justification.
The trigger phrases are generic video-related commands such as '视频截图' and '截取视频', with no scoping to a specific workflow, consent boundary, or file-selection step. This can cause unintended invocation in broader conversations about videos, leading the agent to process media or generate derived outputs when the user did not clearly intend to activate this skill.
This code file contains natural-language strings and help text that force a specific language for descriptions and command output. Under the policy, a language/locale constraint should either be optional for the user or clearly justified as region-specific; neither is present here.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
def run_ffmpeg(cmd):
"""执行 ffmpeg 命令"""
print(f"执行: {' '.join(cmd)}")
result = subprocess.run(cmd, capture_output=True, text=True)
if result.returncode != 0:
print(f"错误: {result.stderr}")
return False
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
def run_ffmpeg(cmd):
"""执行 ffmpeg 命令"""
print(f"执行: {' '.join(cmd)}")
result = subprocess.run(cmd, capture_output=True, text=True)
if result.returncode != 0:
print(f"错误: {result.stderr}")
return False
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
def run_ffmpeg(cmd):
"""执行 ffmpeg 命令"""
print(f"执行: {' '.join(cmd)}")
result = subprocess.run(cmd, capture_output=True, text=True)
if result.returncode != 0:
print(f"错误: {result.stderr}")
return False
The documentation describes extracting frames, clips, and GIFs from videos but provides no warning that videos may contain sensitive, copyrighted, or private content and that extracted outputs may create additional exposure. In a content-analysis or review context, derived media can increase privacy and data-handling risk if users are not alerted before processing.
The manifest description, command labels, tags, and keywords are written only in Chinese, with no indication that the skill supports other languages or that it is intentionally limited to a Chinese-speaking audience. This can violate a language/locale policy when users are not given a choice or the restriction is not documented as region-specific.